koan-server 0.23.3

GraphQL, Subsonic REST, and MCP server for koan music player.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

//! Authentication layer for the koan server.
//!
//! When `auth_enabled = true`:
//!   - All GraphQL/Subsonic requests must carry a valid JWT in `Authorization: Bearer <token>`
//!   - Auth routes (/auth/login, /auth/refresh, /auth/logout) are always accessible
//!
//! When `auth_enabled = false` (default):
//!   - All requests are treated as admin — no auth required. Same behavior as before this feature.

pub mod middleware;
pub mod routes;

use koan_core::auth::Role;

/// Authenticated user context injected into request extensions and GraphQL context.
#[derive(Debug, Clone)]
pub struct AuthUser {
    pub user_id: i64,
    pub username: String,
    pub role: Role,
}

impl AuthUser {
    /// Anonymous admin user for when auth is disabled.
    pub fn anonymous_admin() -> Self {
        Self {
            user_id: 0,
            username: "anonymous".into(),
            role: Role::Admin,
        }
    }
}